Application Serial No.: 09/578,156 
Attorney Docket No.: 019287-0317293 
RCE in Response to Decision on Appeal 



Amendment 

Amendments to the Claims : Please replace all prior versions and listings of claims with the 
following listing of claims. 

Listing of Claims: 

i. (Currently Amended) A computer-implemented system for providing service level 
management i n - Q - no - t - w or- k y-w^ roin tho network inc l ud e s a p l ur al ity of network components, 
and wherein a sorv i co operates on a subset of the p l ura l ity of network components, th e s e rv i c e 
hav i ng a state , tho systom comprising: 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

a plurality of mu l t i p le monitoring agents that each configured to monitor [[a]] 
respective individual domains aspect of the network that include respective subsets op e r a t i on 
of one or more of the plurality of network components that support the service, wherein eaeh- 
the plurality of monitoring agents include: 

a first monitoring agent configured to monitor one or more component 
parameters for a first subset of the plurality of network components in a first domain of 
the network, detect one or more detects intra-domain events in the first domain as a 
function of the component parameters r e spect i ve monitored in the first domain, aspect 
of operat i on and generates generate one or more intra-domain alarms in the first 
domain as a function of the detected intra-domain events detected in the first domain; 
and 

a second monitoring agent configured to monitor one or more component 
parameters for a second subset of the plurality of network components in a second 
domain of the network, detect one or more intra-domain events in the second domain 
as a function of the component parameters monitored in the second domain, and 
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generate one or more intra-domain alarms in the second domain as a function of the 
intra-domain events detected in the second domain; and 
an alarm correlation agent configured to: 

correlate that rece i ves the intra-domain alarms generated a l arms from in the 
mon i toring agents, whoroin first domain and the second domain to generate one or 
more inter-domain alarms across the first domain and the second domain; 

map the inter-domain alarms generated across the first domain and the second 
domain to a service parameter that represents a l arm corre l ation agent determines a 
current state of the service , wherein the current state of the service is undesirable 
when bas e d on the received alarms service parameter has a value that does not meet 
or exceed a service level identified in a service level agreement; and 

issue i ssu e s - one or more instructions to autonomously establish a desirable 
state of the service when in response to the current state of the service [[is]] being 
undesirable , wherein the desirable state of the service is established when the 
instructions cause the value of the service parameter to meet or exceed the service 
level identified in the service level agreement . 

2. (Currently Amended) The system of claim 1, wherein the plurality of monitoring agents 
compr i s e at least one of further include : 

at least one [[an]] infrastructure mon i tor i ng agent configured to monitor one or more 
parameters for at least one transmission device in an infrastructure operat i on of the network 
infrastructure ; 

at least one [[a]] computer system monitor i ng agent configured to monitor one or more 
parameters for operat i on of at least one computer system on the network; 

at least one a network traffic mon i tor i ng agent configured to monitor traffic that flows 
over transmission media on the infrastructure of the network; 

at least one [[an]] application w o -ni t - oring agent configured to monitor operation of at 
least one software application operating on the network; 
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at least one [[a]] trouble-ticketing agent configured to receive reports of problems 
reported by one or more users with respect to operation of the network; 

at least one [[a]] response time mon i tor i ng agent configured to monitor [fa]] response 
time times of a commun i c a i -i w one or more communications on the network; 

at least one [[a]] device monitoring agent configured to monitor one or more 
parameters for op e rat i on -of -a an individual device on the network; and 

at least one [[a]] multicomponent monitoring agent comprising an aggregate of any of 
the abov e mon i tor i ng ag e nts infrastructure agent, the system agent, the traffic agent, the 
application agent, the trouble-ticketing agent, the response time agent, and the device agent . 

3. (Currently Amended) The system of claim 1, wherein the plurality of monitoring agents 
ond - tho - a l arm- corre l ation agent comprise reasoning agents that provide reactive or reflexive 
behavior designed for short-term problem solving relating to the service, and wherein the 
alarm correlation agent comprises a reasoning agent that provides deliberative behavior 
designed for long-term problem solving reiatingto the service , 

4. (Currently Amended) The system of claim 3, wherein the reasoning agents comprise 
ono or more of : 

at least one [[a]] rule-based reasoning agent having a working memory that includes a 
plurality of facts relating to the service, a rule base that represents knowledge relating to 
additional facts to infer and actions to take based on the facts in the working memory, and an 
inference engine configured to make one or more inferences based on the facts in the working 
memory and the knowledge represented in the rule base ; 

at least one [[a]] model-based reasoning agent having a plurality of models that 
represent the plurality of network components that support the service and a correlation 
architecture that provides collaboration among the plurality of models ; 

at least one [[a]] state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of membership 
quantify transitions among the plurality of states ; 
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at least one [[a]] code book based reasoning agent; and 

at least one [[a]] case-based reasoning agent having a case, library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules for 
identifying one or more of the cases in the case library that are relevant to a current problem 
relating to the service, and parameterized adaption logic that adapts solutions variables 
associated with the identified cases for the current problem relating to the service . 

5. {Currently Amended) The system of claim 1, further comprising[[:]] an alarm bucket 
configured to receive repos i tory that rece i ves the g e n e r a t e d intra-domain alarms generated in 
the first domain and the second domain from the first monitoring agents agent and the second 
monitoring agent, wherein the alarm correlation agent ana l yzes is further configured to 
correlate the intra-domain alarms in the alarm repository bucket . 

6. {Currently Amended) A computer-implemented system for providing service level 
management in a n e twork, whoro i n - tho network i ncludes a p l ural i ty of network components, 
and whoroin a serv i ce operates on a subs e t of th e p l ura l ity of network components, the serv i c e 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

a first monitoring agent that monitors configured to: 

monitor one or more component parameters for a first subset asp e ct-o f 

operation of one or more of the plurality of network components , wherein the in a first 

domain of the network; 

detect one or more intra-domain mon i tor i ng agent d e t e cts events in the first 

domain as a function of the component parameters monitored in the first domain; and 



500336961vl 



Page 5 of 27 



Application Serial No.: 09/578,156 
Attorney Docket No.: 019287-0317293 
RCE in Response to Decision on Appeal 



generate one or more intra-domain asp e c - t - of - oporation and - gcnc rates alarms in 
the first domain as a function of the detected intra-domain events detected in the first 
domain; 

a second monitoring agent that mon i tors configured to: 

monitor one or more component parameters for a second subset asp e ct of 
operation of one or more of the plurality of network components , whoro i n the in a 
second aspect is d i ff e r e nt from the first aspect, and wherein domain of the network; 

detect one or more intra-domain th e s e cond monitoring agent detects events in 
the second domain as a function of the component parameters monitored aspect of 
operation in the second domain; and 

generate one or more intra-domain g e n e r a t e s alarms in the second domain as a 
function of the d e t e ct e d intra-domain events detected in the second domain ; 
an alarm bucket configured to receive r e pository that receives the generated intra- 
domain alarms generated in the first domain and the second domain from the first and s e cond 
monitoring -ageffte agent and the second monitoring agent ; and 

an alarm correlation agent that ana l yzes at l east configured to: 

correlate the received the intra-domain alarms in the alarm repository, bucket 
to generate one or more inter-domain alarms across the first domain and the second 
domain; 

map the inter-domain alarms generated across the first domain and the second 
domain to a service parameter that represents determines a current state of the service 
based on ^ t -h e - ona l yzod a l arms , wherein the current state of the service is undesirable 
when the service parameter has a value that does not meet or exceed a service level 
identified in a service level agreement; and 

issue i ssues one or more instructions to autonomously establish a desirable 
state of the service when in response to the current state of the service [[is]] being 
undesirable , wherein the desirable state of the service is established when the 
instructions cause the value of the service parameter to meet or exceed the service 
level identified in the service level agreement . 
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7-8. (Cancelled) 

9. (Currently Amended} The system of claim 6, wherein the first monitoring agent and 
the second monitoring ageffe agent comprise at l east ono of : 

at least one [[an]] infrastructure monitor i ng agent configured to, monitor one or more 
parameters for at least one transmission device in an infrastructure operation of the network 
i nfr a structure ; 

at least one [[a]] compu - te f system mon i tor i ng agent configured to monitor one or more 
parameters for op e ration of - at least one computer system on the network; 

at least one a network traffic monitoring agent configured to monitor traffic that flows 
over transmission media on the infrastructure of the network; 

at least one [[an]] application mon i tor i ng agent configured to monitor e per - at i on of at 
least one software application operating on the network; 

at least one [[a]] trouble-ticketing agent configured to receive reports of problems 
reported by one or more users with respect to operation of the network; 

at least one [[a]] response time mon i tor i ng agent configured to monitor [[a]] response 
time times of a communicat i on one or more communications on the network; 

at least one [[a]] device mon i toring agent configured to monitor one or more 
parameters for operation of a an individual device on the network; and 

at least one [[a]] multicomponent monitoring agent comprising an aggregate of any of 
the above monitoring agents infrastructure agent, the system agent, the traffic agent, the 
application agent, the trouble-ticketing agent, the response time agent, and the device agent . 

10. (Currently Amended) The system of claim 6, wherein the first monitoring agent and 
the second monitoring agents agent comprise reasoning agents that provide reactive or 
reflexive behavior designed for short-term problem solving relating to the service, and wherein 
the alarm correlation agent comprise a reasoning a g ents agent that provides deliberative 
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behavior designed for long-term problem solving relating to the service, wherein the reasoning 
agents comprise one or mor e of : 

at least one [[a]] rule-based reasoning agent having a working memory that includes a 
plurality of facts relating to the service, a rule base that represents knowledge relating to 
additional facts to infer and actions to take based on the facts in the working memory, and an 
inference engine configured to make one or more inferences based on the facts in the working 
memory and the knowledge represented in the rule base ; 

at least one [[a]] model-based reasoning agent having a plurality of models that 
represent the plurality of network components that support the service and a correlation 
architecture that provides collaboration among the plurality of models; 

at least one [[a]] state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of membership 
quantify transitions among the plurality of states ; 

at least one [[a]] code book based reasoning agent; and 

at least one [[a]] case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules for 
identifying one or more of the cases in the case library that are relevant to a current problem 
relating to the service, and parameterized adaption logic that adapts solutions variables 
associated with the identified cases for the current problem relating to the service . 

11. (Currently Amended) A computer-implemented system for providing service level 
management in a network; whoro i n the network i ncludes a p l ural i ty of network components 
ond-ot l east one monitoring ag e nt that monitors an aspect of operation of one or more of th e 
n e twork compono f fe r whero i n the monitor i ng agent detects e v e nts in th e- monitored aspect of 
operat i on and generates a l arms as a function of the d e t e ct e d e v e nts, and whsf - e - in - o - sorvicG 
operates on a sub - sot of the p l ura l ity - of - not - work components , the servic e hav i ng a state, tho 
system comprising: 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
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plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

a plurality of monitoring agents, wherein each of the plurality of monitoring agents are 
configured to: 

monitor one or more component parameters for a subset of the plurality of 
network components in a respective domain of a plurality of domains of the network; 

detect one or more intra-domain events in the respective domain as a function 
of the component parameters monitored in the respective domain; and 

generate one or more intra-domain alarms in the respective domain as a 
function of the intra-domain events detected in the respective domain; and 
an alarm correlation agent , wherein the alarm correlation agent is that receives 
configured to: 

correlate the generated intra-domain alarms from generated in the mon i toring 
a genty - wh e r ei n respective domains by the plurality of monitoring agents to generate 
one or more inter-domain alarms across the plurality of domains of the network; 

map the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a l arm corre l at i on agent determines a 
current state of the service , wherein based on the rece i ved a l arms current state of the 
service is undesirable when the service parameter has a value that does not meet or 
exceed a service level identified in a service level agreement; and 

issue i ssu e s one or more instructions to autonomously establish a desirable 
state of the service when in response to the current state of the service [[is]] being 
undesirable , wherein the desirable state of the service is established when the 
instructions cause the value of the service parameter to meet or exceed the service 
level identified in the service level agreement . 

12. (Currently Amended) The system of claim 11, wherein the alarm correlation agent 
comprises one or more of a reasoning agent that provides deliberative behavior designed for 
long-term problem solving relating to the service, wherein the reasoning agent comprises : 
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at least one [[a]] rule-based reasoning agent having a working memory that includes a 
plurality of facts relating to the service, a rule base that represents knowledge relating to 
additional facts to infer and actions to take based on the facts in the working memory, and an 
inference engine configured to make one or more inferences based on the facts in the working 
memory and the knowledge represented in the rule base ; 

at least one [[a]] model-based reasoning agent having a plurality of models that 
represent the plurality of network components that support the service and a correlation 
architecture that provides collaboration among the plurality of models; 

at least one [[a]] state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of membership 
quantify transitions among the plurality of states ; 

at least one [[a]] code book based reasoning agent; and 

at least one [[a]] case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules for 
identifying one or more of the cases in the case library that are relevant to a current problem 
relating to the service, and parameterized adaption logic that adapts solutions variables 
associated with the identified cases for the current problem relating to the service . 

13. (Currently Amended) A computer-implemented method for providing service level 
management i n a network / wher e in th e n e twor -k- m e l udes a p l urality of network compon e nts ; 
and where i n a service operates on □ subset of the p l ura li ty of network components, - tho scrv i co 
hav i ng a - 5tato, the method comprising: 

providing a service over a network having a plurality of network components that 
support the service^ wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

monitoring at l east one asp oct - of operation of one or more component parameters for 
[[of]] the plurality of network components that support the service using a plurality of 
monitoring agents, wherein each of the plurality of monitoring agents are configured to 
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monitor a subset of the plurality of network components in a respective domain of a plurality 
of domains of the network; 

detecting one or more intra-domain events in each of the respective domains as a 
function monitor e d a sp e ct of o perat i on the component parameters monitored by the plurality 
of monitoring agents in the respective domains ; 

generating one or more intra-domain alarms each of the respective domains as a 
function of the intra-domain detected events detected in the respective domains ; 

correlating an al yz i ng the generated intra-domain alarms generated in the respective 
domains using an alarm correlation agent, wherein the alarm correlation agent is configured to 
determine correlate the intra-domain alarms to generate one or more inter-domain alarms 
across the plurality of domains of the network; 

mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a current state of the service , wherein the 
current state of the service is undesirable when the service parameter has a value that does 
not meet or exceed a service level identified in a service level agreement; and 

issuing one or more instructions to autonomously establish a desirable state of the 
service wh efh in response to the current state of the service [[is]] being undesirable , wherein 
the desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level agreement . 

14. (Cancelled) 

15. (Currently Amended) The method according to claim 13, wherein the component 
parameters monitored by the plurality asp e cts of monitoring agents in the respective domains 
op e r a tion include at l east ono of : ' 

one or more parameters for at least one transmission device in an infrastructure 
operation of the network i nfrastructur e; 

one or more parameters for oporat i on of at least one computer system on the network; 
traffic that flows over transmission media on the infrastructure of the network; 
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operation of at least one software application operating on the network; and 

operation of a troub le- t i ck e t i ng agent that receives reports of problems reported by 
one or more users with respect to operation of the network; 

one or more parameters for op e r a t i on of a an individual device on the network; 

[[a]] response times of a communication one or more communications on the 
network; and 

an aggregate of any of the above aspects of operation transmission device parameters, 
the computer system parameters, the transmission media traffic, the software application, the 
reports of problems, the individual device parameters, and the response times . 

16. (Currently Amended) The method of claim 13, wherein generat i ng the plurality of 
monitorinfi agents apply reasoning to detect the intra-domain events and generate the intra- 
domain alarms , wherein the reasoning includes awMng at l east one of : 

applying rule-based reasoning using a working memory that includes a plurality of facts 
relating to the service, a rule base that represents knowledge relating to additional facts to 
infer and actions to take based on the facts in the working memory, and an inference engine 
configured to make one or more inferences based on the facts in the working memory and the 
knowledge represented in the rule base ; 

applying model-based reasoning using a plurality of models that represent the plurality 
of network components that support the service and a correlation architecture that provides 
collaboration among the plurality of models; 

applying state-transition graph based reasoning using fuzzy logic that defines grades of 
membership for a plurality of states, wherein the grades of membership quantify transitions 
among the plurality of states ; 

applying code book based reasoning; and 

applying case-based reasoning using a case library that includes a plurality of cases 
representing episodes of problem solving, a plurality of relevance rules for identifying one or 
more of the cases in the case library that are relevant to a current problem relating to the 
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service, and parameterized adaption logic that adapts solutions variables associated with the 
identified cases for the current problem relating to the service . 

17. (Currently Amended) The method of claim 13, wherein the alarm correlation agent 
applies reasoning to generate ana l yz i ng the ge- ne - FOted inter-domain alarms , wherein the 
reasoning includes app l ying at l east ono of : 

applying rule-based reasoning using a working memory that includes a plurality of facts 
relating to the service, a rule base that represents knowledge relating to additional facts to 
infer and actions to take based on the facts in the working memory, and an inference engine 
configured to make one or more inferences based on the facts in the working memory and the 
knowledge represented in the rule base; 

applying model-based reasoning using a plurality of models that represent the plurality 
of network components that support the service and a correlation architecture that provides 
collaboration among the plurality of models ; 

applying state-transition graph based reasoning using fuzzy logic that defines grades of 
membership for a plurality of states, wherein the grades of membership quantify transitions 
among the plurality of states ; 

applying code book based reasoning; and 

applying case-based reasoning using a case library that includes a plurality of cases 
representing episodes of problem solving, a plurality of relevance rules for identifying one or 
more of the cases in the case library that are relevant to a current problem relating to the 
service, and parameterized adaption logic that adapts solutions variables associated with the 
identified cases for the current problem relating to the service . 



18. (Currently Amended) A computer-implemented method for providing service level 
management i- n - a network, whoro i n the network i nc l udes a p l ur a l i ty of network components, 
and wh e re i n a s e rv i ce operates on a subset of tho - plwa li ty of network components, the serv i c e 
i comprising: 
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providing a service over a network having a plurality of network components that 
support the service, wherein . performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

monitoring one or more component parameters for a first subset asp e ct of op e r a t i on - of 
ono or more of the plurality of network components in a first domain of the network using a 
first monitoring agent; 

detecting one or more intra-domain events in the first domain as a function mon i tored 
aspect of operat i on the component parameters monitored in the first domain using the first 
monitoring agent ; 

generating a f i rst sot of one or more intra-domain alarms in the first domain as a 
function of the d e t e ct e d intra-domain events detected in the first mon i tor e d-asp e ct — of 
operat i on domain using the first monitoring agent ; 

monitoring one or more component parameters for a second subset asp e ct of 
operation of one or more of the plurality of network components , where i n the in a second 
domain of aspect is d i fferent from the first aspect network using a second monitoring agent; 

detecting one or more intra-domain events in the second domain as a function 
monitored aspect of operat i on the component parameters monitored in the second domain 
using the second monitoring agent ; 

generating a second sot of one or more intra-domain alarms in the second domain as a 
function of the d e t e ct e d intra-domain events detected in the second monitored aspect of 
operation domain using the second monitoring agent ; 

receiving send i ng the intra-domain alarms generated in the first domain and the second 
domain from the first monitoring agent and the second monitoring agent, wherein the intra- 
domain alarms are received at s e ts of a la wns - to an alarm r e pository bucket ; 

correlating ana l yz i ng at l east the intra-domain f i rst and second generated s e ts of alarms 
in the alarm r e pos i tory bucket using an alarm correlation agent, wherein the alarm correlation 
agent is configured to determine correlate the intra-domain alarms to generate one or more 
inter-domain alarms across the plurality of domains of the network; 
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mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a current state of the service , wherein the 
current state of the service is undesirable when the service parameter has a value that does 
not meet or exceed a service level identified in a service level agreement; and 

issuing one or more instructions to autonomously establish a desirable state of the 
service when in response to the current state of the service [[is]] being undesirable , wherein 
the desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level agreement , 

19. (Cancelled) 

20. (Currently Amended) The method of claim 18, wherein the one or more issu e d 
instructions control one or more component parameters for on aspect of operat i on of one or 
more of the plurality of network components that support the service, wherein the one or 
more instructions are issued to cause the service parameter value to meet or exceed or the 
service level identified in the service level agreement . 

21. (Currently Amended) A computer readable medium having computer executable 
instructions recorded thereon, wherein the computer executable instructions are operable to 
direct a computer to perform a method for providing service level management i n a network, 
wher ei n the network i nc l udes a p l ura l ity of n e twork compon e nts, a nd wh e r ei n a ■ s e rv i c e 
operates on a subset of the p l ural i ty of network components, the serv i ce having a state , the 
method comprising: 

providing a service over a network having a plurality of network components that 
support the service, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

monitoring at l east one aspect of operation of one or more component parameters for 
[[of]] the plurality of network *r4 components that support the service using a plurality of 
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monitoring agents, wherein each of the plurality of monitoring agents are configured to 
monitor a subset of the plurality of network components in a respective domain of a plurality 
of domains of the network ; 

detecting one or more intra-domain events in each of the respective domains as a 
function mon i tored aspect of operat i on the component parameters monitored by the plurality 
of monitoring agents in the respective domains ; 

generating one or more intra-domain alarms each of the respective domains as a 
function of the intra-domain detected events detected in the respective domains ; 

correlating ana l yzing the g e n e r -a te4 intra-domain alarms generated in the respective 
domains using an alarm correlation agent, wherein the alarm correlation agent is configured to 
determin e correlate the intra-domain alarms to generate one or more inter-domain alarms 
across the plurality of domains of the network; 

mapping the inter-domain alarms generated across the plurality of domains of the 
network to a service parameter that represents a current state of the service , wherein the 
current state of the service is undesirable when the service parameter has a value that does 
not meet or exceed a service level identified in a service level agreement ; and 

issuing one or more instructions to autonomously establish a desirable state of the 
service when in response to the current state of the service [[is]] being undesirable , wherein 
the desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level agreement , 

22. (Cancelled) 

23. {Currently Amended) A computer-implemented system for providing service level 
management i n a network, wh e r e in th e n e twork inc l udes a p l ura l ity of network components, 
and whoroin o serv i co - operates on a subset of the p l ura l ity of components, the service having a 
stat e, the system comprising: 

a network having a plurality of network components that support a service provided 
over the network, wherein performance of the service depends upon performances of the 
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plurality of network components that support the service, and wherein the service has a state 
that represents the performance of the service; 

a plurality of mu l tip l e monitoring agents that each configured to monitor [[a]] 
respective individual domains aspect of the network that include respective subsets op e r a t i on 
of - ono or more of the plurality of network components that support the service, wherein eaek 
the plurality of monitoring agents is configured to detect ag e nt d e t e cts one or more intra- 
domain events in the respective domain as a function of the component parameters monitored 
in the respective domain aspect of operation and generates generate one or more intra- 
domain alarms in the respective domain as a function of the detected intra-domain events 
detected in the respective domain, wherein each of the plurality of monitoring agent i nc l ud i ng 
agents include : 

an alarm correlation agent configured to correlate the intra-domain that 
roco i vos the generated alarms generated in the respective domain in addition to one or 
more intra-domain alarms generated in the other individual domains by the other 
monitoring agents to generate one or more inter-domain alarms across the individual 
domains of the network, where i n map the inter-domain alarms generated across the 
individual domains and to a service parameter that represents alarm corre l at i on agent 
determ i nes a current state of the service , wherein based on the fe ee i ved a l arms current 
state of the service is undesirable when the service parameter has a value that does not 
meet or exceed a service level identified in a service level agreement ; and 

a control agent configured to control contro l s the component parameters for 
the subset of the plurality of network components in the respective monitored domain 
aspect of op e r a tion, whoro i n the contro l agent issues and issue one or more 
instructions for one or more of regard i ng the controlled component parameters aspeet 
of operat i on to autonomously establish a desirable state of the service when in 
response to the current state of the service [[is]] being undesirable , wherein the 
desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level 
agreement . 
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24. {Currently Amended) The system of claim 23, wherein the plurality of monitoring 
agents compr i se; at l east one of further include : 

at least one [[an]] infrastructure m on i tor i ng agent configured to monitor one or more 
parameters for at least one transmission device in an infrastructure operation of the network 
infrastructur e; 

at least one [[a]] computer system mon i toring agent configured to monitor one or more 
parameters for operat i on of at least one computer system on the network; 

at least one anetwork traffic mon i toring agent configured to monitor traffic that flows 
over transmission media on the infrastructure of the network; 

at least one [[an]] application mon i toring agent configured to monitor operat i on of at 
least one software application operating on the network; 

at least one [[a]] trouble-ticketing agent configured to receive reports of problems 
reported by one or more users with respect to operation of the network; 

at least one [[a]] response time mon i tor i ng agent configured to monitor [[a]] response 
time times of a communication one or more communications on the network; 

at least one [[a]] device monitor i ng agent configured to monitor one or more 
parameters for operat i on of a an individual device on the network; and 

at least one [[a]] multicomponent monitoring agent comprising an aggregate of any of 
the abov e monitor i ng- a g e nte infrastructure agent, the system agent, the traffic agent, the 
application agent, the trouble-ticketing agent, the response time agent, and the device agent . 

25. (Currently Amended) The system of claim 23, wherein the plurality of monitoring 
agents comprise reasoning agents that provide reactive or reflexive behavior designed for 
short-term problem solving relating to the service, and wherein the alarm correlation agent 
within each of the plurality of monitoring agents comprises a reasoning agent that provides 
deliberative behavior designed for long-term problem solving relating to the service , and 
wherein the reasoning agents comprise at -l- eost one of : 
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at least one [[a]] rule-based reasoning agent having a working memory that includes a 
plurality of facts relating to the service, a rule base that represents knowledge relating to 
additional facts to infer and actions to take based on the facts in the working memory, and an 
inference engine configured to make one or more inferences based on the facts in the working 
memory and the knowledge represented in the rule base ; 

at least one [[a]] model-based reasoning agent having a plurality of models that 
represent the plurality of network components that support the service and a correlation 
architecture that provides collaboration among the plurality of models ; 

at least one [[a]] state-transition graph based reasoning agent having fuzzy logic that 
defines grades of membership for a plurality of states, wherein the grades of membership 
quantify transitions among the plurality of states ; 

at least one [[a]] code book based reasoning agent; and 

at least one [[a]] case-based reasoning agent having a case library that includes a 
plurality of cases representing episodes of problem solving, a plurality of relevance rules for 
identifying one or more of the cases in the case library that are relevant to a current problem 
relating to the service, and parameterized adaption logic that adapts solutions variables 
associated with the identified cases for the current problem relating to the service . 

26. (Currently Amended) A computer readable medium having computer executable 
instructions recorded thereon, wherein the computer executable instructions are operable to 
direct an agent operating on each of a p l ura l ity of ag e nts computer to perform a method for 
providing service level management in a network, wherein the network i ncludes d plura l ity of 
n e twork components, and wherein a serv i ce op e rat e s on a subset of the p l ura l ity of n e two r k - 
components, the serv i ce hav i ng a stat e, the method comprising: 

providing a service over a network having a plurality of network components that 
support the service, wherein performance of the service depends upon performances of the 
plurality of network components that support the service, and wherein the service has a state 
that represents the performance of.the service; 



500336961vl 



Page 19 of 27 



Application Serial No.: 09/578,156 
Attorney Docket No.: 019287-0317293 
RCE in Response to Decision on Appeal 

monitoring at l east one respective aspect of operation a plurality of domains of the 
network using the agent operating on the computer, wherein the monitored domain includes a 
subset one or mor e of the plurality of network a«4 components that support the service ; 

detecting one or more intra-domain events in the resp e ctiv e monitored domain as a 
function aspect of operation the component parameters monitored in the domain; 

generating one or more intra-domain alarms in the monitored domain as a function of 
the detected intra-domain events detected in the monitored domain ; 

communicating with one or more other agents in the other domains of the network to 
access intra-domain events [[or]] and intra-domain alarms across the plurality i n other 
respect i ve mon i tored aspects of op e rat i on domains of the network; 

correlating a fta -l y - ang — at l east the generated intra-domain alarms generated in the 
monitored domain, aft4 the acc e ss e d intra-domain events detected across the plurality of 
domains, and the intra-domain [[or]] alarms generated across the plurality of domains to 
generate one or more inter-domain alarms across the plurality of domains of the network; 

mapping the inter-domain alarms generated across the plurality of domains to a service 
parameter that represents determine a current state of the service , wherein the current state 
of the service is undesirable when the service parameter has a value that does not meet or 
exceed a service level identified in a service level agreement ; and 

issuing one or more instructions to autonomously establish a desirable state of the 
service when in response to the current state of the service [[is]] being undesirable , wherein 
the desirable state of the service is established when the instructions cause the value of the 
service parameter to meet or exceed the service level identified in the service level agreement . 

27. (New) The system of claim 1, wherein the service level agreement further identifies 
one or more penalties for a supplier of the service when the value of the service parameter 
does not meet or exceed the service level identified in the service level agreement. 
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28. (New) The system of claim 27, wherein the service level agreement further identifies 
one or more rewards for the supplier of the service when the value of the service parameter 
meets or exceeds the service level identified in the service level agreement. 
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